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ABSTRACT 

An access control sy&tem that joins the uniqueness 
of biometric verification, as well as the storage security and 
processing capabilities of smart cards, is defined here. The 
biometric technique chosen has been hand geometry, 
which is considered to provide low/medium security (there 
are other much more secure, as fingerprint, iris or retina), 
to t)e easy to use, to achieve high acceptance by users, and 
which performance is given throughout fast processing and 
medium cost. Also, the small template size needed for 
each user is positive for storage and processing capabilities 
required in the system* But the innovation in the s^tem 
proposed is that the smart card not only stores the user's 
template, but also performs the verification process with 
the features set by the terminal to the card. With this 
improvement, the security of the system has risen because 
the template is never extracted from the card, avoiding 
duplication of such sensible data. The specifications for the 
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enrollment process wiil be presented as well as the 
applications where this new system is recommended. 

INTRODUCTION 

Most of the access control systems implanted 
nowadays are based in PIN (Personal Identification 
Number) presentation and/or Magnetic Stripe Cards, 
These solutions, although secure enough for most 
applications, could not be valid for some high security 
environments. This lack of security is led by the possibility 
of forgetting the PIN and/or losing or duplicating the card. 
Industry Is solving this problem by applying new 
technologies like smart cards and biometiic recognition. 
Smart cards [13] solve the duplication problem and ease 
management of lost cards, but the user must remember a 
PIN in order to be verified by the system. This means that 
if a user has more than one card, he must remember as 
many different PINs as cards owned, which leads to the 
common practice of applying the same PIN to all cards, 
with the loss of .security that this practice achieves. 
Biometric identification soh^es the problem of 
remembering several PlNs, as this number is transformed 
into btoiosicat features of the user [41. 

But before designing or selecting a biometric access 
control system, two aspects must be deHncd: the biometric 
technique used; and the configuration of the system. The 
selection of the biometric technique is not trivial. There 
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are several techniques (fingerprint, voice, S^^ris, retina, 
Ivanc^ signature, etc. [4, 51), and its selecjic^PluId be 

made^'bjp means of security levels cost, environment^ user 
interaction, user acceptance and verification tinae. The 
configuration of the system can be as a recognition system 
(comparing the features extracted with the teniplates of all 
users stored in a database), or as a verification ^stem 
(comparitig the features extracted to the temjp^tate of the 
user who claims his identity); A recognition system 
requires a central database and communication of all 
POAs (Points of Access) with thiit database, A veijfication 
system can avoid the need of such a database and 
connections^ by using a portable storage media^ where the 
user's template is recorded 

FEATURES EXTRAenON 

From the blometrie techniques existing todayv hand 
geomie^l^Sias been s^^^ Hand georaetfy is 

?|^niiilgp^^ security techniquev what can 

leadTtMajb itout of considbratioh, compare 
more secti^ techniques suphas fSngjcrprin^ jWsijOc retina. 
But hand geometiy bas several 

in teresting for developing an: access control system. These 
advantages are: 

• Medium cost (only a low/medium resolution CCD 
camera is needed), 

• Mlilii^utd^ (low compu^tional cost and 

^^f^ppv temptale sij^ (the lowest of all techniques 
Ikinown today); • 



Very easy to usie 2|nd attractive to users. 
Easy to clean and maintain. 

tapjk of r^lati^n to police, Justice and criminal 

^ec^rdSi," 



All these characteristics makes this technique 
attractive for ^stems integrators, due to its tow overall 
cost, and as well very quickiy accepted by users who do not 
see any inconvenience in the system. 

The iiser's features extraction is based on a 
j^ho to^lap and side of the user's hand taken by 

a CG© feie^^^^^^ To obtain the 

photograph, the user must place his hand in a platform 
with 6 tops (Figure 1), which guide the position of the 
palm. When the pressure sensors located in each of the 
tops are activated, the photograph is taken (Figure 2). 

After that, a simplified morphological and 
volumetric image processing is performed with the 
photograph, based on simjple algorithms [3, 6, 10. 11]. 
Several measurements are taken, including finger widths at 
several points, palm width, deviation of the fingers from 
the straight line, location of the inlcrfinger points, angles 
between them, palm height, etc* From all those features 
extracted, a set is selected for verification purposes. This 
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selection has been performed through 
inter-class/intra-class deviation ratio. Once the features 
with the highest ratio are detected, a principal component 
analysis has been performed to reduce the dimension of 
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the feature vector [l-ll]. The structure of^fcpature 

i/eclor obtained through this analysis, is a|^K to all the 

users and, therefore, the feature vector for each user 
sample is represented by 13 bytes. 

VERIFICATION 

Several methods for the verification process have 
been studied [lOJ. From those methods, three are 
presented as the most representative: 

• Euclidean Distance: Verification is performed 
calculating the Euclidean distance between the 
template of the user and the sample taken, and 
comparing it with a threshold value. TTie template 
is obtained as the mean value of the first five 
photographs taken from that user in the 
enrollment process* 

• Hamming Distance: The number of features out of 
the mean, plus/minus a factor of the standard 
deviation, is counted and compared to a threshold. 
The template is obtained as the mean and standard 
deviation of the five first photographs taken from 
the user in the enrollment process, 

• Gaussian Mixture Modelling ( GMM ): The user's 
sample is entered in the GMM and the likelihood 
probability is obtained. The GMM of each user is 
composed of a set of means, variances and weights, 
tuned with the enrollment samples (five). This 
technique has been widely used in Speaker 
Recognition, as it can be seen in [2, 7, 8]. 

Among the other methods studied, a neural network 
approach through Radial Basis Functions {12j was tried. It 
showed very good results in classification, i.e., having a 
central database with ail users enrolled In the system. But 
in order to use this approach in verification, a set of other 
users should be used in the enrollment process. This fact 
goes against the philosophy of the biometric system 
explained here, as the existence of a central database is to 
be avoided. 

The success of the verification scheme is obtained 
by two ratios: False Acceptance Ratio (FAR) and False 
Rejection Ratio (FRR). These two ratios are 
complementary, in the sense that if a reduction in FAR is 
needed, then an increase in FRR is obtained. Results 
obtained are presented in the following table targeting a 
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FRR near 10%. Tw^^sers and at least ten samples of 
each user participat^^Phe calculation of ratios. 

From the figures obtained, several conclusions can 
be drawn. While the Euclidean Distance gives the lowest 
template size, its performance is quite poor, not being able 
to obtain low error rates easily. On the other hand, GMM 
shows really good results, compa^rablc to the ones obtained 
for other, so claimed, high security biometric techniques; 
but the template size is significantly increased. Half the 
way, the Hamming Distance provides nice error rates, 
maintaining a veiy low template size. 

SMART CARDS 

Biometric Authentication Systems based in hand 
geometry or other techniques are available, even 
commercially, and with great success. But these kinds of 
systems present a lack of security due to the way of storing 
the template and verifying the user's sample. Not 
considering the systems based in a central database where 
the users' templates are stored, other systems use a 
portable storage media to keep and transmit the template. 
Examples of this media could be any memory based 
scheme, such as magnetic stripe cards, laser cards or 
integrated circuit cards. With this system configuration the 
verification is performed in the terminal, therefore, 
needing the terminal to extract the user's template from 
the card. 

The solution presented is analog to the advance that 
smart cards meant about PIN verification, compared to 
magnetic stripe cards. In smart cards, the PIN is verified 
inside the card, not being able to read the PIN from the 
card, avoiding duplication of the user's card. The system 
proposed compares tnsi(te the card, the user's sample with 
the template stored. 

To achieve this goal, a new data structure must be 
present in the card, as well as new commands for writing, 
updating, and verifying the template. JavaCards have been 
used to develop the prototype in order to test the 
technology and, after a successful pilot project, lo 
manufacture in hard masking. 

The three verification methods selected have been 
tested, obtaining the following figures: 



* , ? «< v: " 
/. ■ ' I'" • fr.. 


-VerificllidWimB 


^^"J' t (Soae!Size\-?4 


fEuciideanlf^ 


0.3 seconds 


372 bytes 




0.2 seconds 


428 bytes 




2.1 seconds 


3873 bytes 



With these results and those shown in the 
verification analysis, it seems that the Hamming Distance 
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gives the best performance ratio between Failures (FAR 
and FRR), code size and verification time. But if high 
security is necessary, GMM is recommended, although 
deep work should be done to decrease the verification time 
obtained nowadays. 
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Electronic Parts & Packaging 
for Space and Aeronautic Applications 



IMAPS will join forces with the NASA Blcctronic 
Parts & Packaging (NEPP) Program to cosponsor this 
advanced technology workshop on April 3-5, 2000, in 
Washington, DC. 

The proposed workshop on Electronic Parts and 
Packaging for Space and Aeronautic should be an ideal 
opportunity for those in the aerospace industry and 
academla to participate in review and discussion of the 
latest advances in this fascinating and demanding area of 
mtcro-elcctronics and packaging. This event provides 
technical interaction and education in the 
micro-electronics and packaging industries. The three-day, 



five-session workshop will represent a condensed 
assessment of novels state-of-the-art electronic parts and 
packaging technologies for space and aeronautic 
applications. 

The NEPP Program is funded by NASA 
Headquarters with the charter to assess new and advanced 
electronic parts and packaging technologies for space and 
aeronautic applications. The Lead Center for this activity 
is JPL. There arc three technical projects within NEPP: 
Electronic Parts; Electronic Packaging; and Electronic 
Radiation Characterization. For details, contact: Ann Bell 
at (703) 758-5166; E-mail: (abell@imaps.org). 
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